CVE-2026-114113
- Gravità
- Sconosciuta
- CVSS
- Nessun vettore CVSS v3
- CISA KEV
- Non presente nel catalogo KEV in cache
- EPSS
- Nessun punteggio EPSS in cache
Versioni interessate e corrette
OSV non ha indicato un intervallo semver per questo pacchetto nella voce salvata.
Il testo semplificato appare solo se già in cache. Questa pagina non lo genera.
Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoders
Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242) in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to process untrusted input, triggering these libvips flaws.
Alias: GHSA-f88m-g3jw-g9cj
Avviso su OSV.dev · pubblicato il 2026-10-21 · modificato il 2026-10-29
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/114xxx/CVE-2026-114113.json
- https://github.com/lovell/sharp/security/advisories/GHSA-f88m-g3jw-g9cj
- https://nvd.nist.gov/vuln/detail/CVE-2026-114113
- https://www.vulncheck.com/advisories/sharp-before-0.35.0-multiple-vulnerabilities-via-bundled-libvips-image-decoders